{"schemaVersion":1,"name":"GovRAMP Snapshot, Core, and Moderate — published NIST control identifiers","description":"Direct GovRAMP-to-NIST references only. No FedRAMP, TX-RAMP or CJIS equivalence is asserted.","sourceNote":"Current GovRAMP Snapshot Matrix v1.4 and Moderate Controls Matrix v1.06, Core and full Moderate selections; retrieved 2026-09-18. Source hashes retained in resources/govramp/source-manifest.json.","reviewNotes":"Control sets reconciled to official matrices. Review the cited versions before publishing for this organization.","entries":[{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"AC-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-2","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_AC_2"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"AC-2 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-2 (1)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-2 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_AC_2_1"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"AC-2 (7)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-2 (7)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-2 (7) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_AC_2_7"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"AC-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-4","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_AC_4"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"AC-6","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-6","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-6 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_AC_6"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"AC-6 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-6 (2)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-6 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_AC_6_2"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"AC-6 (10)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-6 (10)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-6 (10) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_AC_6_10"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"AC-17","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-17","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-17 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_AC_17"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"AC-17 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-17 (2)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-17 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_AC_17_2"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"AU-7","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-7","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-7 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_AU_7"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"AU-7 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-7 (1)","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-7 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_AU_7_1"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"AU-11","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-11","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-11 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_AU_11"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"CM-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-2","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_CM_2"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"CM-2 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-2 (2)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-2 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_CM_2_2"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"CM-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-4","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_CM_4"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"CM-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-5","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_CM_5"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"CM-5 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-5 (1)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-5 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_CM_5_1"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"CM-5 (5)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-5 (5)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-5 (5) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_CM_5_5"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"CM-6","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-6","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-6 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_CM_6"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"CM-6 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-6 (1)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-6 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_CM_6_1"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"CM-9","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-9","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-9 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_CM_9"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"IA-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-2","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_IA_2"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"IA-2 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-2 (1)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-2 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_IA_2_1"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"IA-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-5","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_IA_5"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"IA-5 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-5 (1)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-5 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_IA_5_1"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"IR-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-4","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_IR_4"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"IR-4 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-4 (1)","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-4 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_IR_4_1"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"MA-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"MA-3","gapCategory":"MA","summary":"The cited GovRAMP matrix explicitly identifies MA-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_MA_3"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"RA-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"RA-5","gapCategory":"RA","summary":"The cited GovRAMP matrix explicitly identifies RA-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_RA_5"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"RA-5 (5)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"RA-5 (5)","gapCategory":"RA","summary":"The cited GovRAMP matrix explicitly identifies RA-5 (5) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_RA_5_5"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"SC-7","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-7","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-7 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_SC_7"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"SC-7 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-7 (3)","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-7 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_SC_7_3"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"SC-28","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-28","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-28 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_SC_28"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"SI-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-2","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_SI_2"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"SI-2 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-2 (2)","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-2 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_SI_2_2"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"SI-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-3","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_SI_3"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"SI-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-4","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_SI_4"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"SI-4 (4)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-4 (4)","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-4 (4) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_SI_4_4"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"SI-7","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-7","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-7 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_SI_7"]},{"program":"GOVRAMP_SECURITY_SNAPSHOT","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Snapshot-Matrix_Rev5_V1.4_202507_Company%20Name_Product%20Name.xlsx","standard":"GovRAMP Security Snapshot Readiness","requirement":"SI-7 (7)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-7 (7)","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-7 (7) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_SECURITY_SNAPSHOT_SI_7_7"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"AC-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-2","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_AC_2"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"AC-2 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-2 (1)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-2 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_AC_2_1"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"AC-2 (7)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-2 (7)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-2 (7) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_AC_2_7"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"AC-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-4","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_AC_4"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"AC-6","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-6","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-6 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_AC_6"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"AC-6 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-6 (2)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-6 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_AC_6_2"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"AC-6 (10)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-6 (10)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-6 (10) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_AC_6_10"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"AC-17","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-17","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-17 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_AC_17"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"AC-17 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-17 (2)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-17 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_AC_17_2"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"AU-7","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-7","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-7 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_AU_7"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"AU-7 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-7 (1)","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-7 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_AU_7_1"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"AU-11","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-11","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-11 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_AU_11"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"CM-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-2","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_CM_2"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"CM-2 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-2 (2)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-2 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_CM_2_2"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"CM-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-4","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_CM_4"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"CM-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-5","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_CM_5"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"CM-5 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-5 (1)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-5 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_CM_5_1"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"CM-5 (5)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-5 (5)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-5 (5) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_CM_5_5"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"CM-6","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-6","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-6 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_CM_6"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"CM-6 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-6 (1)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-6 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_CM_6_1"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"CM-8","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-8","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-8 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_CM_8"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"CM-9","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-9","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-9 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_CM_9"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"CP-7","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-7","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-7 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_CP_7"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"CP-8","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-8","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-8 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_CP_8"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"CP-8 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-8 (1)","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-8 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_CP_8_1"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"CP-8 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-8 (2)","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-8 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_CP_8_2"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"CP-9","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-9","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-9 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_CP_9"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"CP-10","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-10","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-10 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_CP_10"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"IA-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-2","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_IA_2"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"IA-2 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-2 (1)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-2 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_IA_2_1"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"IA-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-4","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_IA_4"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"IA-4 (4)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-4 (4)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-4 (4) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_IA_4_4"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"IA-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-5","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_IA_5"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"IA-5 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-5 (1)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-5 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_IA_5_1"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"IA-8","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-8","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-8 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_IA_8"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"IR-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-3","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_IR_3"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"IR-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-4","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_IR_4"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"IR-4 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-4 (1)","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-4 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_IR_4_1"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"IR-6","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-6","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-6 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_IR_6"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"IR-6 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-6 (1)","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-6 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_IR_6_1"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"IR-8","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-8","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-8 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_IR_8"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"MA-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"MA-3","gapCategory":"MA","summary":"The cited GovRAMP matrix explicitly identifies MA-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_MA_3"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"RA-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"RA-5","gapCategory":"RA","summary":"The cited GovRAMP matrix explicitly identifies RA-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_RA_5"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"RA-5 (5)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"RA-5 (5)","gapCategory":"RA","summary":"The cited GovRAMP matrix explicitly identifies RA-5 (5) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_RA_5_5"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"SA-11","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-11","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-11 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_SA_11"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"SA-11 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-11 (1)","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-11 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_SA_11_1"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"SC-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-2","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_SC_2"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"SC-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-4","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_SC_4"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"SC-7","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-7","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-7 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_SC_7"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"SC-7 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-7 (3)","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-7 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_SC_7_3"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"SC-13","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-13","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-13 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_SC_13"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"SC-21","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-21","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-21 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_SC_21"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"SC-28","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-28","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-28 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_SC_28"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"SI-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-2","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_SI_2"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"SI-2 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-2 (2)","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-2 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_SI_2_2"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"SI-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-3","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_SI_3"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"SI-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-4","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_SI_4"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"SI-4 (4)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-4 (4)","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-4 (4) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_SI_4_4"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"SI-7","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-7","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-7 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_SI_7"]},{"program":"GOVRAMP_CORE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Core Readiness — 60 Controls","requirement":"SI-7 (7)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-7 (7)","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-7 (7) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_CORE_SI_7_7"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-1","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-1","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-1 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-2","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-2 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-2 (1)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-2 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_2_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-2 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-2 (2)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-2 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_2_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-2 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-2 (3)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-2 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_2_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-2 (4)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-2 (4)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-2 (4) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_2_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-2 (5)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-2 (5)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-2 (5) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_2_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-2 (7)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-2 (7)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-2 (7) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_2_7"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-2 (9)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-2 (9)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-2 (9) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_2_9"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-2 (12)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-2 (12)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-2 (12) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_2_12"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-2 (13)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-2 (13)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-2 (13) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_2_13"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-3","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-4","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-4 (21)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-4 (21)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-4 (21) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_4_21"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-5","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-6","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-6","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-6 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_6"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-6 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-6 (1)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-6 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_6_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-6 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-6 (2)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-6 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_6_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-6 (5)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-6 (5)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-6 (5) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_6_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-6 (7)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-6 (7)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-6 (7) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_6_7"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-6 (9)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-6 (9)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-6 (9) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_6_9"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-6 (10)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-6 (10)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-6 (10) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_6_10"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-7","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-7","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-7 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_7"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-8","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-8","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-8 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_8"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-11","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-11","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-11 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_11"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-11 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-11 (1)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-11 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_11_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-12","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-12","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-12 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_12"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-14","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-14","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-14 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_14"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-17","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-17","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-17 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_17"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-17 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-17 (1)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-17 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_17_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-17 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-17 (2)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-17 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_17_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-17 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-17 (3)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-17 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_17_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-17 (4)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-17 (4)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-17 (4) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_17_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-18","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-18","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-18 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_18"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-18 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-18 (1)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-18 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_18_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-18 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-18 (3)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-18 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_18_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-19","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-19","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-19 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_19"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-19 (5)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-19 (5)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-19 (5) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_19_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-20","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-20","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-20 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_20"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-20 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-20 (1)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-20 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_20_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-20 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-20 (2)","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-20 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_20_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-21","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-21","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-21 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_21"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AC-22","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AC-22","gapCategory":"AC","summary":"The cited GovRAMP matrix explicitly identifies AC-22 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AC_22"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AT-1","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AT-1","gapCategory":"AT","summary":"The cited GovRAMP matrix explicitly identifies AT-1 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AT_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AT-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AT-2","gapCategory":"AT","summary":"The cited GovRAMP matrix explicitly identifies AT-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AT_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AT-2 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AT-2 (2)","gapCategory":"AT","summary":"The cited GovRAMP matrix explicitly identifies AT-2 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AT_2_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AT-2 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AT-2 (3)","gapCategory":"AT","summary":"The cited GovRAMP matrix explicitly identifies AT-2 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AT_2_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AT-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AT-3","gapCategory":"AT","summary":"The cited GovRAMP matrix explicitly identifies AT-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AT_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AT-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AT-4","gapCategory":"AT","summary":"The cited GovRAMP matrix explicitly identifies AT-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AT_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AU-1","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-1","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-1 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AU_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AU-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-2","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AU_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AU-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-3","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AU_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AU-3 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-3 (1)","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-3 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AU_3_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AU-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-4","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AU_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AU-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-5","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AU_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AU-6","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-6","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-6 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AU_6"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AU-6 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-6 (1)","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-6 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AU_6_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AU-6 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-6 (3)","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-6 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AU_6_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AU-7","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-7","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-7 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AU_7"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AU-7 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-7 (1)","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-7 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AU_7_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AU-8","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-8","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-8 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AU_8"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AU-9","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-9","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-9 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AU_9"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AU-9 (4)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-9 (4)","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-9 (4) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AU_9_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AU-11","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-11","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-11 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AU_11"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"AU-12","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"AU-12","gapCategory":"AU","summary":"The cited GovRAMP matrix explicitly identifies AU-12 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_AU_12"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CA-1","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CA-1","gapCategory":"CA","summary":"The cited GovRAMP matrix explicitly identifies CA-1 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CA_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CA-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CA-2","gapCategory":"CA","summary":"The cited GovRAMP matrix explicitly identifies CA-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CA_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CA-2 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CA-2 (1)","gapCategory":"CA","summary":"The cited GovRAMP matrix explicitly identifies CA-2 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CA_2_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CA-2 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CA-2 (3)","gapCategory":"CA","summary":"The cited GovRAMP matrix explicitly identifies CA-2 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CA_2_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CA-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CA-3","gapCategory":"CA","summary":"The cited GovRAMP matrix explicitly identifies CA-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CA_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CA-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CA-5","gapCategory":"CA","summary":"The cited GovRAMP matrix explicitly identifies CA-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CA_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CA-6","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CA-6","gapCategory":"CA","summary":"The cited GovRAMP matrix explicitly identifies CA-6 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CA_6"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CA-7","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CA-7","gapCategory":"CA","summary":"The cited GovRAMP matrix explicitly identifies CA-7 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CA_7"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CA-7 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CA-7 (1)","gapCategory":"CA","summary":"The cited GovRAMP matrix explicitly identifies CA-7 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CA_7_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CA-7 (4)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CA-7 (4)","gapCategory":"CA","summary":"The cited GovRAMP matrix explicitly identifies CA-7 (4) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CA_7_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CA-8","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CA-8","gapCategory":"CA","summary":"The cited GovRAMP matrix explicitly identifies CA-8 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CA_8"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CA-8 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CA-8 (1)","gapCategory":"CA","summary":"The cited GovRAMP matrix explicitly identifies CA-8 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CA_8_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CA-9","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CA-9","gapCategory":"CA","summary":"The cited GovRAMP matrix explicitly identifies CA-9 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CA_9"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-1","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-1","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-1 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-2","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-2 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-2 (2)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-2 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_2_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-2 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-2 (3)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-2 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_2_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-2 (7)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-2 (7)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-2 (7) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_2_7"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-3","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-3 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-3 (2)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-3 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_3_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-3 (4)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-3 (4)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-3 (4) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_3_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-4","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-4 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-4 (2)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-4 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_4_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-5","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-5 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-5 (1)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-5 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_5_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-5 (5)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-5 (5)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-5 (5) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_5_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-6","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-6","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-6 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_6"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-6 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-6 (1)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-6 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_6_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-7","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-7","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-7 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_7"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-7 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-7 (1)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-7 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_7_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-7 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-7 (2)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-7 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_7_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-7 (5)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-7 (5)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-7 (5) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_7_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-8","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-8","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-8 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_8"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-8 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-8 (1)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-8 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_8_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-8 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-8 (3)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-8 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_8_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-9","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-9","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-9 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_9"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-10","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-10","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-10 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_10"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-11","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-11","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-11 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_11"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-12","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-12","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-12 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_12"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CM-12 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CM-12 (1)","gapCategory":"CM","summary":"The cited GovRAMP matrix explicitly identifies CM-12 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CM_12_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-1","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-1","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-1 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-2","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-2 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-2 (1)","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-2 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_2_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-2 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-2 (3)","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-2 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_2_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-2 (8)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-2 (8)","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-2 (8) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_2_8"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-3","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-4","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-4 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-4 (1)","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-4 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_4_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-6","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-6","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-6 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_6"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-6 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-6 (1)","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-6 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_6_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-6 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-6 (3)","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-6 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_6_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-7","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-7","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-7 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_7"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-7 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-7 (1)","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-7 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_7_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-7 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-7 (2)","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-7 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_7_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-7 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-7 (3)","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-7 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_7_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-8","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-8","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-8 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_8"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-8 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-8 (1)","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-8 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_8_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-8 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-8 (2)","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-8 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_8_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-9","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-9","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-9 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_9"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-9 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-9 (1)","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-9 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_9_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-9 (8)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-9 (8)","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-9 (8) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_9_8"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-10","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-10","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-10 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_10"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"CP-10 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"CP-10 (2)","gapCategory":"CP","summary":"The cited GovRAMP matrix explicitly identifies CP-10 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_CP_10_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-1","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-1","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-1 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-2","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-2 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-2 (1)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-2 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_2_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-2 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-2 (2)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-2 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_2_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-2 (5)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-2 (5)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-2 (5) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_2_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-2 (6)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-2 (6)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-2 (6) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_2_6"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-2 (8)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-2 (8)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-2 (8) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_2_8"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-3","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-4","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-4 (4)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-4 (4)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-4 (4) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_4_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-5","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-5 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-5 (1)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-5 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_5_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-5 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-5 (2)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-5 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_5_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-5 (6)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-5 (6)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-5 (6) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_5_6"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-5 (7)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-5 (7)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-5 (7) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_5_7"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-6","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-6","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-6 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_6"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-7","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-7","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-7 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_7"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-8","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-8","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-8 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_8"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-8 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-8 (2)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-8 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_8_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-8 (4)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-8 (4)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-8 (4) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_8_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-11","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-11","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-11 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_11"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-12","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-12","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-12 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_12"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-12 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-12 (2)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-12 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_12_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-12 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-12 (3)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-12 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_12_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IA-12 (5)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IA-12 (5)","gapCategory":"IA","summary":"The cited GovRAMP matrix explicitly identifies IA-12 (5) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IA_12_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IR-1","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-1","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-1 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IR_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IR-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-2","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IR_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IR-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-3","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IR_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IR-3 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-3 (2)","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-3 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IR_3_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IR-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-4","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IR_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IR-4 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-4 (1)","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-4 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IR_4_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IR-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-5","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IR_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IR-6","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-6","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-6 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IR_6"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IR-6 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-6 (1)","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-6 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IR_6_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IR-6 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-6 (3)","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-6 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IR_6_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IR-7","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-7","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-7 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IR_7"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IR-7 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-7 (1)","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-7 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IR_7_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IR-8","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-8","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-8 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IR_8"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IR-9","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-9","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-9 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IR_9"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IR-9 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-9 (2)","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-9 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IR_9_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IR-9 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-9 (3)","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-9 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IR_9_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"IR-9 (4)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"IR-9 (4)","gapCategory":"IR","summary":"The cited GovRAMP matrix explicitly identifies IR-9 (4) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_IR_9_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"MA-1","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"MA-1","gapCategory":"MA","summary":"The cited GovRAMP matrix explicitly identifies MA-1 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_MA_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"MA-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"MA-2","gapCategory":"MA","summary":"The cited GovRAMP matrix explicitly identifies MA-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_MA_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"MA-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"MA-3","gapCategory":"MA","summary":"The cited GovRAMP matrix explicitly identifies MA-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_MA_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"MA-3 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"MA-3 (1)","gapCategory":"MA","summary":"The cited GovRAMP matrix explicitly identifies MA-3 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_MA_3_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"MA-3 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"MA-3 (2)","gapCategory":"MA","summary":"The cited GovRAMP matrix explicitly identifies MA-3 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_MA_3_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"MA-3 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"MA-3 (3)","gapCategory":"MA","summary":"The cited GovRAMP matrix explicitly identifies MA-3 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_MA_3_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"MA-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"MA-4","gapCategory":"MA","summary":"The cited GovRAMP matrix explicitly identifies MA-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_MA_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"MA-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"MA-5","gapCategory":"MA","summary":"The cited GovRAMP matrix explicitly identifies MA-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_MA_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"MA-5 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"MA-5 (1)","gapCategory":"MA","summary":"The cited GovRAMP matrix explicitly identifies MA-5 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_MA_5_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"MA-6","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"MA-6","gapCategory":"MA","summary":"The cited GovRAMP matrix explicitly identifies MA-6 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_MA_6"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"MP-1","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"MP-1","gapCategory":"MP","summary":"The cited GovRAMP matrix explicitly identifies MP-1 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_MP_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"MP-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"MP-2","gapCategory":"MP","summary":"The cited GovRAMP matrix explicitly identifies MP-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_MP_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"MP-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"MP-3","gapCategory":"MP","summary":"The cited GovRAMP matrix explicitly identifies MP-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_MP_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"MP-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"MP-4","gapCategory":"MP","summary":"The cited GovRAMP matrix explicitly identifies MP-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_MP_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"MP-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"MP-5","gapCategory":"MP","summary":"The cited GovRAMP matrix explicitly identifies MP-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_MP_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"MP-6","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"MP-6","gapCategory":"MP","summary":"The cited GovRAMP matrix explicitly identifies MP-6 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_MP_6"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"MP-7","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"MP-7","gapCategory":"MP","summary":"The cited GovRAMP matrix explicitly identifies MP-7 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_MP_7"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PE-1","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PE-1","gapCategory":"PE","summary":"The cited GovRAMP matrix explicitly identifies PE-1 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PE_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PE-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PE-2","gapCategory":"PE","summary":"The cited GovRAMP matrix explicitly identifies PE-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PE_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PE-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PE-3","gapCategory":"PE","summary":"The cited GovRAMP matrix explicitly identifies PE-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PE_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PE-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PE-4","gapCategory":"PE","summary":"The cited GovRAMP matrix explicitly identifies PE-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PE_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PE-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PE-5","gapCategory":"PE","summary":"The cited GovRAMP matrix explicitly identifies PE-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PE_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PE-6","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PE-6","gapCategory":"PE","summary":"The cited GovRAMP matrix explicitly identifies PE-6 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PE_6"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PE-6 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PE-6 (1)","gapCategory":"PE","summary":"The cited GovRAMP matrix explicitly identifies PE-6 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PE_6_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PE-8","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PE-8","gapCategory":"PE","summary":"The cited GovRAMP matrix explicitly identifies PE-8 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PE_8"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PE-9","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PE-9","gapCategory":"PE","summary":"The cited GovRAMP matrix explicitly identifies PE-9 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PE_9"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PE-10","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PE-10","gapCategory":"PE","summary":"The cited GovRAMP matrix explicitly identifies PE-10 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PE_10"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PE-11","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PE-11","gapCategory":"PE","summary":"The cited GovRAMP matrix explicitly identifies PE-11 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PE_11"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PE-12","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PE-12","gapCategory":"PE","summary":"The cited GovRAMP matrix explicitly identifies PE-12 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PE_12"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PE-13","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PE-13","gapCategory":"PE","summary":"The cited GovRAMP matrix explicitly identifies PE-13 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PE_13"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PE-13 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PE-13 (1)","gapCategory":"PE","summary":"The cited GovRAMP matrix explicitly identifies PE-13 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PE_13_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PE-13 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PE-13 (2)","gapCategory":"PE","summary":"The cited GovRAMP matrix explicitly identifies PE-13 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PE_13_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PE-14","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PE-14","gapCategory":"PE","summary":"The cited GovRAMP matrix explicitly identifies PE-14 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PE_14"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PE-15","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PE-15","gapCategory":"PE","summary":"The cited GovRAMP matrix explicitly identifies PE-15 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PE_15"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PE-16","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PE-16","gapCategory":"PE","summary":"The cited GovRAMP matrix explicitly identifies PE-16 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PE_16"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PE-17","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PE-17","gapCategory":"PE","summary":"The cited GovRAMP matrix explicitly identifies PE-17 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PE_17"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PL-1","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PL-1","gapCategory":"PL","summary":"The cited GovRAMP matrix explicitly identifies PL-1 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PL_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PL-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PL-2","gapCategory":"PL","summary":"The cited GovRAMP matrix explicitly identifies PL-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PL_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PL-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PL-4","gapCategory":"PL","summary":"The cited GovRAMP matrix explicitly identifies PL-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PL_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PL-4 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PL-4 (1)","gapCategory":"PL","summary":"The cited GovRAMP matrix explicitly identifies PL-4 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PL_4_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PL-8","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PL-8","gapCategory":"PL","summary":"The cited GovRAMP matrix explicitly identifies PL-8 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PL_8"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PL-10","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PL-10","gapCategory":"PL","summary":"The cited GovRAMP matrix explicitly identifies PL-10 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PL_10"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PL-11","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PL-11","gapCategory":"PL","summary":"The cited GovRAMP matrix explicitly identifies PL-11 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PL_11"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PS-1","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PS-1","gapCategory":"PS","summary":"The cited GovRAMP matrix explicitly identifies PS-1 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PS_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PS-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PS-2","gapCategory":"PS","summary":"The cited GovRAMP matrix explicitly identifies PS-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PS_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PS-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PS-3","gapCategory":"PS","summary":"The cited GovRAMP matrix explicitly identifies PS-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PS_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PS-3 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PS-3 (3)","gapCategory":"PS","summary":"The cited GovRAMP matrix explicitly identifies PS-3 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PS_3_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PS-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PS-4","gapCategory":"PS","summary":"The cited GovRAMP matrix explicitly identifies PS-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PS_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PS-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PS-5","gapCategory":"PS","summary":"The cited GovRAMP matrix explicitly identifies PS-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PS_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PS-6","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PS-6","gapCategory":"PS","summary":"The cited GovRAMP matrix explicitly identifies PS-6 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PS_6"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PS-7","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PS-7","gapCategory":"PS","summary":"The cited GovRAMP matrix explicitly identifies PS-7 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PS_7"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PS-8","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PS-8","gapCategory":"PS","summary":"The cited GovRAMP matrix explicitly identifies PS-8 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PS_8"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"PS-9","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"PS-9","gapCategory":"PS","summary":"The cited GovRAMP matrix explicitly identifies PS-9 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_PS_9"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"RA-1","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"RA-1","gapCategory":"RA","summary":"The cited GovRAMP matrix explicitly identifies RA-1 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_RA_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"RA-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"RA-2","gapCategory":"RA","summary":"The cited GovRAMP matrix explicitly identifies RA-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_RA_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"RA-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"RA-3","gapCategory":"RA","summary":"The cited GovRAMP matrix explicitly identifies RA-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_RA_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"RA-3 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"RA-3 (1)","gapCategory":"RA","summary":"The cited GovRAMP matrix explicitly identifies RA-3 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_RA_3_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"RA-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"RA-5","gapCategory":"RA","summary":"The cited GovRAMP matrix explicitly identifies RA-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_RA_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"RA-5 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"RA-5 (2)","gapCategory":"RA","summary":"The cited GovRAMP matrix explicitly identifies RA-5 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_RA_5_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"RA-5 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"RA-5 (3)","gapCategory":"RA","summary":"The cited GovRAMP matrix explicitly identifies RA-5 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_RA_5_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"RA-5 (5)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"RA-5 (5)","gapCategory":"RA","summary":"The cited GovRAMP matrix explicitly identifies RA-5 (5) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_RA_5_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"RA-5 (11)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"RA-5 (11)","gapCategory":"RA","summary":"The cited GovRAMP matrix explicitly identifies RA-5 (11) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_RA_5_11"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"RA-7","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"RA-7","gapCategory":"RA","summary":"The cited GovRAMP matrix explicitly identifies RA-7 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_RA_7"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"RA-9","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"RA-9","gapCategory":"RA","summary":"The cited GovRAMP matrix explicitly identifies RA-9 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_RA_9"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-1","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-1","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-1 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-2","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-3","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-4","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-4 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-4 (1)","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-4 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_4_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-4 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-4 (2)","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-4 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_4_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-4 (9)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-4 (9)","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-4 (9) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_4_9"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-5","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-8","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-8","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-8 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_8"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-9","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-9","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-9 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_9"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-9 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-9 (1)","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-9 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_9_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-9 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-9 (2)","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-9 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_9_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-9 (5)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-9 (5)","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-9 (5) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_9_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-10","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-10","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-10 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_10"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-11","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-11","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-11 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_11"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-11 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-11 (1)","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-11 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_11_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-11 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-11 (2)","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-11 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_11_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-15","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-15","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-15 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_15"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-15 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-15 (3)","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-15 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_15_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SA-22","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SA-22","gapCategory":"SA","summary":"The cited GovRAMP matrix explicitly identifies SA-22 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SA_22"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-1","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-1","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-1 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-2","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-4","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-5","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-7","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-7","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-7 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_7"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-7 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-7 (3)","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-7 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_7_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-7 (4)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-7 (4)","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-7 (4) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_7_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-7 (5)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-7 (5)","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-7 (5) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_7_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-7 (7)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-7 (7)","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-7 (7) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_7_7"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-7 (8)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-7 (8)","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-7 (8) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_7_8"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-7 (12)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-7 (12)","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-7 (12) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_7_12"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-7 (18)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-7 (18)","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-7 (18) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_7_18"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-8","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-8","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-8 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_8"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-8 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-8 (1)","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-8 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_8_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-10","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-10","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-10 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_10"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-12","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-12","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-12 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_12"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-13","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-13","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-13 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_13"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-15","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-15","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-15 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_15"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-17","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-17","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-17 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_17"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-18","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-18","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-18 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_18"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-20","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-20","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-20 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_20"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-21","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-21","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-21 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_21"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-22","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-22","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-22 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_22"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-23","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-23","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-23 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_23"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-28","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-28","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-28 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_28"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-28 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-28 (1)","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-28 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_28_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-39","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-39","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-39 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_39"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-45","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-45","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-45 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_45"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SC-45 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SC-45 (1)","gapCategory":"SC","summary":"The cited GovRAMP matrix explicitly identifies SC-45 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SC_45_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-1","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-1","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-1 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-2","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-2 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-2 (2)","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-2 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_2_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-2 (3)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-2 (3)","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-2 (3) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_2_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-3","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-4","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-4","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-4 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-4 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-4 (1)","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-4 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_4_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-4 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-4 (2)","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-4 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_4_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-4 (4)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-4 (4)","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-4 (4) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_4_4"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-4 (5)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-4 (5)","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-4 (5) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_4_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-4 (16)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-4 (16)","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-4 (16) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_4_16"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-4 (18)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-4 (18)","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-4 (18) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_4_18"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-4 (23)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-4 (23)","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-4 (23) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_4_23"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-5","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-6","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-6","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-6 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_6"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-7","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-7","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-7 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_7"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-7 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-7 (1)","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-7 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_7_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-7 (7)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-7 (7)","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-7 (7) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_7_7"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-8","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-8","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-8 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_8"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-8 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-8 (2)","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-8 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_8_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-10","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-10","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-10 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_10"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-11","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-11","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-11 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_11"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-12","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-12","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-12 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_12"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SI-16","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SI-16","gapCategory":"SI","summary":"The cited GovRAMP matrix explicitly identifies SI-16 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SI_16"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SR-1","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SR-1","gapCategory":"SR","summary":"The cited GovRAMP matrix explicitly identifies SR-1 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SR_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SR-2","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SR-2","gapCategory":"SR","summary":"The cited GovRAMP matrix explicitly identifies SR-2 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SR_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SR-2 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SR-2 (1)","gapCategory":"SR","summary":"The cited GovRAMP matrix explicitly identifies SR-2 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SR_2_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SR-3","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SR-3","gapCategory":"SR","summary":"The cited GovRAMP matrix explicitly identifies SR-3 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SR_3"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SR-5","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SR-5","gapCategory":"SR","summary":"The cited GovRAMP matrix explicitly identifies SR-5 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SR_5"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SR-6","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SR-6","gapCategory":"SR","summary":"The cited GovRAMP matrix explicitly identifies SR-6 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SR_6"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SR-8","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SR-8","gapCategory":"SR","summary":"The cited GovRAMP matrix explicitly identifies SR-8 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SR_8"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SR-10","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SR-10","gapCategory":"SR","summary":"The cited GovRAMP matrix explicitly identifies SR-10 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SR_10"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SR-11","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SR-11","gapCategory":"SR","summary":"The cited GovRAMP matrix explicitly identifies SR-11 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SR_11"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SR-11 (1)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SR-11 (1)","gapCategory":"SR","summary":"The cited GovRAMP matrix explicitly identifies SR-11 (1) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SR_11_1"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SR-11 (2)","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SR-11 (2)","gapCategory":"SR","summary":"The cited GovRAMP matrix explicitly identifies SR-11 (2) in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SR_11_2"]},{"program":"GOVRAMP_MODERATE","validationStatus":"AUTHORITATIVE","authoritySource":"https://govramp.org/hubfs/GovRAMP-Controls-Matrix_Mod_Rev5_V1.06.xlsx","standard":"GovRAMP Moderate Readiness","requirement":"SR-12","nistPublication":"NIST SP 800-53 Rev. 5","nistSection":"SR-12","gapCategory":"SR","summary":"The cited GovRAMP matrix explicitly identifies SR-12 in this program. This is a source reference, not a finding of equivalence or implementation.","evidenceExamples":[],"failurePatterns":[],"relatedQuestionKeys":["GOVRAMP_MODERATE_SR_12"]}]}